Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yevTUKoekgxthYNF9UC9g2og_sU.roa
File: yevTUKoekgxthYNF9UC9g2og_sU.roa (raw, json)
Hash identifier: xZziSD+xPtooWtMgMUSyqOe7OPL7NyRcS4WIfKtM9zE=
Subject key identifier: C9:EB:D3:50:AA:1E:92:0C:6D:85:83:45:F5:40:BD:83:6A:20:FE:C5
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019269A3B31D0A8EE9AB77B7EF23DF4070BB
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yevTUKoekgxthYNF9UC9g2og_sU.roa
Signing time: Tue 08 Oct 2024 00:59:48 +0000
ROA not before: Tue 08 Oct 2024 00:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34412
IP address blocks: 109.122.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 13:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:69:a3:b3:1d:0a:8e:e9:ab:77:b7:ef:23:df:40:70:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 8 00:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9ebd350aa1e920c6d858345f540bd836a20fec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:31:60:c1:50:70:15:61:9f:aa:be:8b:b4:
9e:fa:cb:53:55:85:91:c8:1e:8d:49:5a:30:27:67:
bc:b0:04:a4:96:18:b2:00:a9:cd:68:7e:1a:78:0e:
f2:e5:25:f3:bc:57:47:d7:5c:3b:e6:5c:42:87:cd:
ec:a7:71:a3:1e:8c:7c:37:e0:c9:6a:37:80:09:d1:
f5:07:c3:82:40:18:7e:6a:c7:19:6f:99:ce:06:45:
fb:2c:46:b6:73:cd:31:34:e5:4b:f5:19:f1:65:f5:
21:48:e3:16:ec:7b:bd:fa:39:cf:71:13:f7:2a:c7:
1d:a5:c5:51:70:f8:d7:31:87:52:20:17:87:55:76:
13:f5:df:a4:27:94:d2:94:ed:1e:8e:d2:1f:06:87:
7e:92:30:c8:31:5a:b9:34:16:56:18:8b:40:8a:45:
b4:e8:e2:39:2d:bc:a1:be:54:b1:61:cc:d5:72:ba:
31:17:fd:dc:6b:49:82:93:44:ab:00:21:d7:c9:31:
9f:6d:1d:04:a8:66:e3:c4:65:d4:ee:a1:bc:5c:12:
8c:90:40:66:96:fc:eb:f0:88:61:20:49:c1:ca:8d:
91:3d:6f:c2:59:62:34:a0:65:24:a0:73:50:17:f9:
18:21:67:66:eb:6e:9c:31:df:09:dc:7d:41:cb:4d:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:D3:50:AA:1E:92:0C:6D:85:83:45:F5:40:BD:83:6A:20:FE:C5
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yevTUKoekgxthYNF9UC9g2og_sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.248.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a2:98:2e:1d:ba:68:c0:08:f5:df:56:a4:95:91:a8:10:94:
6c:de:ed:ca:4d:12:14:4d:64:f5:22:b0:98:22:33:3b:33:b8:
ef:22:5e:7f:19:b6:5e:59:8e:c4:d7:ea:68:57:b6:68:50:e3:
61:c7:74:29:96:14:60:5e:94:b3:c6:85:ba:e0:a9:96:48:7b:
d3:a2:9d:b8:07:1c:9c:8c:fa:fb:97:21:9c:a1:da:91:35:8f:
09:9a:19:58:e6:96:6e:79:1a:1d:e0:22:49:44:b0:f2:ea:b7:
e3:f1:57:8d:b1:ea:c5:9f:ec:62:4f:7b:d9:ad:96:26:c0:0e:
6f:dc:be:05:5d:c2:de:35:81:bd:7a:e0:a5:10:84:db:60:cf:
34:99:f4:f5:a8:5a:d9:d9:6e:28:44:5b:c9:f4:3c:9b:2d:ff:
c7:df:28:b1:88:29:84:a8:80:72:b7:fe:61:66:35:2b:69:89:
cd:a4:09:5a:8d:77:64:d7:b8:f7:e7:1a:16:36:f9:5a:c7:3f:
8d:1c:f3:73:f4:ef:15:5a:6b:de:ed:8f:ab:ae:3e:47:c6:e1:
05:f6:6e:31:61:74:b3:1e:03:db:cb:81:9a:25:7a:b5:81:08:
ea:58:55:ee:ee:c1:23:a5:a7:a8:08:49:3a:b8:99:d0:0a:f8:
2d:a3:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 16:45:47 2024 by rpki-client on console-ams.rpki-client.org